diff options
author | Viktor Dukhovni <openssl-users@dukhovni.org> | 2016-02-27 14:17:28 -0500 |
---|---|---|
committer | Viktor Dukhovni <openssl-users@dukhovni.org> | 2016-04-03 11:35:19 -0400 |
commit | 70dd3c6593d87e4cbb56b485717cb2cfff730f3e (patch) | |
tree | 309286eaa887e800347f19f19151468fb8cdbf06 /crypto/x509/x509_lu.c | |
parent | 0f1ef63bf1708fbbb1ab248d455f619ce2d5b1ac (diff) | |
download | openssl-70dd3c6593d87e4cbb56b485717cb2cfff730f3e.tar.gz |
Tidy up x509_vfy callback handling
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Diffstat (limited to 'crypto/x509/x509_lu.c')
-rw-r--r-- | crypto/x509/x509_lu.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/crypto/x509/x509_lu.c b/crypto/x509/x509_lu.c index 3b0daf1269..f9802c5a80 100644 --- a/crypto/x509/x509_lu.c +++ b/crypto/x509/x509_lu.c @@ -630,7 +630,7 @@ int X509_STORE_CTX_get1_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *x) } /* If certificate matches all OK */ if (ctx->check_issued(ctx, x, obj.data.x509)) { - if (x509_check_cert_time(ctx, obj.data.x509, 1)) { + if (x509_check_cert_time(ctx, obj.data.x509, -1)) { *issuer = obj.data.x509; return 1; } @@ -661,7 +661,7 @@ int X509_STORE_CTX_get1_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *x) * match if no certificate time is OK. */ - if (x509_check_cert_time(ctx, *issuer, 1)) + if (x509_check_cert_time(ctx, *issuer, -1)) break; } } |